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AMENDMENTS TO THE CLAIMS 

1. (Original) A method for storing data in a data 
storage system that includes primary and secondary 
storage subsystems, including respective first and second 
volatile cache memories and respective first and second 
non-volatile storage media, the method comprising: 

receiving the data at the primary storage subsystem 
from a host processor; 

writing the data to the first volatile cache memory 
in the primary storage subsystem; 

copying the data from the primary storage subsystem 
to the secondary storage subsystem; 

writing the copied data to the second volatile cache 
memory in the secondary storage subsystem; 

returning an acknowledgment from the secondary 
storage subsystem to the primary storage subsystem 
responsively to writing the copied data to the second 
volatile cache memory and prior to saving the data in the 
second non-volatile storage media; 

signaling the host processor that the data have been 
stored in the data storage system responsively to the 
acknowledgment from the secondary storage subsystem; and 

transferring the data in the primary and secondary 
storage subsystems from the first and second volatile 
cache memories to the first and second non-volatile 
storage media, respectively. 

2. (Original) The method according to claim 1, wherein 
copying the data comprises transmitting the data between 
mutually-remote sites over a communication link between 
the sites. 

3. (Original) The method according to claim 1, wherein 
the second volatile cache memory and the second non- 
volatile storage media are located in mutually-remote 
sites, and wherein transferring the data comprises 



3 



49267A3 



transmitting the data from the second volatile cache 
memory to the second non-volatile storage media over a 
communication link between the sites. 

4. (Original) The method according to claim 1, wherein 
copying the data comprises creating a mirror on the 
secondary storage subsystem of the data received by the 
primary storage subsystem. 

5. (Original) The method according to claim 4, and 
comprising, upon occurrence of a failure in the primary 
storage subsystem, configuring the secondary storage 
subsystem to serve as the primary storage subsystem so as 
to receive further data from the host processor to be 
stored by the data storage system. 

6. (Original) The method according to claim 4, wherein 
the second volatile cache memory is located in a site 
remote from the primary storage subsystem and is operated 
by a service provider other than an owner of the primary 
storage subsystem, and wherein transferring the data from 
the second volatile cache memory to the second non- 
volatile storage media comprises processing the data on a 
f ee-per-service basis. 

7. (Original) The method according to claim 1, wherein 
transferring the data comprises sending a message from 
the secondary storage subsystem to the primary storage 
subsystem indicating addresses of the data that have been 
transferred to the second non-volatile storage media, and 
wherein the method further comprises creating a record on 
the primary storage subsystem of the addresses of the 
data copied to the secondary storage subsystem, and 
updating the record in response to the message. 

8. (Original) The method according to claim 7, and 
further comprising, upon recovery of the system from a 

failure of the secondary storage subsystem, conveying, 
responsively to the record, a portion of the data from 
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the primary storage subsystem to be stored on the 
secondary storage subsystem. 

9. (Original) The method according to claim 8, wherein 
updating the record comprises removing from the record 
the addresses of the data that have been transferred to 
the second non-volatile storage media. 

10. (Original) The method according to claim 7, wherein 
creating the record comprises marking respective bits in 
a bitmap corresponding to addresses of the data copied to 
the secondary storage subsystem, and wherein updating the 
record comprises clearing the respective bits. 

11. (Original) The method according to claim 7, wherein 
transferring the data comprises transferring the data in 
a range of the addresses from the second volatile cache 
memory to the second non-volatile storage media, and 
wherein sending the message comprises informing the 
primary storage subsystem that the data in the range have 
been transferred, so that the primary storage subsystem 
updates the record with respect to the range. 

12. (Original) The method according to claim 11, wherein 
transferring the data in the range comprises destaging 
the range of the addresses. 

13. (Original) The method according to claim 11, wherein 
creating the record comprises maintaining a mirror of the 
record on the secondary storage subsystem, and wherein 
transferring the data in the range comprises selecting 
the data to be transferred from the second volatile cache 
memory to the second non-volatile storage media 
responsively to the mirror. 

14. (Original) The method according to claim 1, wherein 
transferring the data comprises sending a message from 
the primary storage subsystem to the secondary storage 
subsystem indicating addresses of the data that have been 
transferred to the first non-volatile storage media, and 
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wherein the method further comprises creating a record on 
the secondary storage subsystem of the addresses of the 
data copied to the secondary storage subsystem, and 
updating the record in response to the message. 

15. (Original) The method according to claim 14, and 
further comprising, upon recovery of the system from a 
failure of the primary storage subsystem, conveying, 
responsively to the record, a portion of the data from 
the secondary storage subsystem to be stored on the 
primary storage subsystem. 

16. (Original) The method according to claim 15, wherein 
updating the record comprises removing from the record 
the addresses of the data that have been transferred to 
the primary non-volatile storage media. 

17. (Original) The method according to claim 14, wherein 
creating the record comprises marking respective bits in 
a bitmap corresponding to addresses of the data copied to 
the secondary storage subsystem, and wherein updating the 
record comprises clearing the respective bits. 

18. (Original) The method according to claim 14, wherein 
transferring the data comprises transferring the data in 
a range of the addresses from the first volatile cache 
memory to the first non-volatile storage media, and 
wherein sending the message comprises informing the 
secondary storage subsystem that the data in the range 
have been transferred, so that the secondary storage 
subsystem updates the record with respect to the range. 

19. (Original) The method according to claim 18, wherein 
transferring the data in the range comprises destaging 
the range of the addresses. 

20. (Original) The method according to claim 18, wherein 
creating the record comprises maintaining a mirror of the 
record on the primary storage subsystem, and wherein 
transferring the data in the range comprises selecting 
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the data to be transferred from the first volatile cache 
memory to the first non-volatile storage media 
responsively to the mirror. 

21. (Previously presented) A data storage system, 
comprising : 

a primary storage subsystem, which comprises a first 
volatile cache memory and first non-volatile storage 
media; and 

a secondary storage subsystem, which comprises a 
second volatile cache memory and second non-volatile 
storage media, 

wherein the primary storage subsystem is arranged to 
receive data from a host processor, to write the data to 
the first volatile cache memory, to copy the data to the 
secondary storage subsystem, and to transfer the data 
from the first volatile cache memory to the first non- 
volatile storage media, and 

wherein the secondary storage subsystem is arranged 
to receive and write the copied data to the second 
volatile cache memory, to transfer the data from the 
second volatile cache memory to the second non-volatile 
storage media, and to return an acknowledgment to the 
primary storage subsystem responsively to writing the 
copied data to the second volatile cache memory and prior 
to transferring the data to the second non-volatile 
storage media, 

wherein the primary storage subsystem is arranged to 
signal the host processor that the data have been stored 
in the data storage system responsively to the 
acknowledgment from the secondary storage subsystem. 

22. (Original) The system according to claim 21, wherein 
the primary and secondary storage subsystems are located 
at mutually-remote sites, and are coupled to communicate 
over a communication link between the sites. 



7 



49267A3 



23. (Original) The system according to claim 21, wherein 
the second volatile cache memory and the second non- 
volatile storage media are located in mutually-remote 
sites, and wherein the secondary storage subsystem is 
arranged to transfer the data from the second volatile 
cache memory to the second non-volatile storage media 
over a communication link between the sites. 

24. (Original) The system according to claim 21, wherein 
the secondary storage subsystem is arranged to mirror the 
data held by the primary storage subsystem. 

25. (Original) The system according to claim 24, wherein 
the secondary storage subsystem is configurable, upon 
occurrence of a failure in the primary storage subsystem, 
to serve as the primary storage subsystem so as to 
receive further data from the host processor to be stored 
by the data storage system. 

26. (Original) The system according to claim 21, wherein 
the second volatile cache memory is located in a site 
remote from the primary storage subsystem and is operated 
on a f ee-per-service basis by a service provider other 
than an owner of the primary storage subsystem. 

27. (Original) The system according to claim 21, wherein 
the secondary storage subsystem is arranged to send a 
message to the primary storage subsystem indicating 
addresses of the data that have been transferred to the 
second non-volatile storage media, and wherein the 
primary storage subsystem is arranged to create a record 
of the addresses of the data copied to the secondary 
storage subsystem, and to update the record in response 
to the message. 

28. (Original) The system according to claim 27, wherein 

the primary storage subsystem is arranged, upon recovery 
of the system from a failure of the secondary storage 
subsystem, to convey, responsively to the record, a 



8 



49267A3 



portion of the data from the primary storage subsystem to 
be stored on the secondary storage subsystem. 

29. (Original) The system according to claim 28, wherein 
the primary storage subsystem is arranged to remove from 
the record the addresses of the data that have been 
transferred to the second non-volatile storage media. 

30. (Original) The system according to claim 27, wherein 
the primary storage subsystem is arranged to create the 
record by marking respective bits in a bitmap 
corresponding to addresses of the data copied to the 
secondary storage subsystem, and to update the record by 
clearing the respective bits in response to the message. 

31. (Original) The system according to claim 27, wherein 
the secondary storage subsystem is arranged to transfer 
the data over a range of the addresses from the second 
volatile cache memory to the second non-volatile storage 
media, and to indicate in the message that the data in 
the range have been transferred, so that the primary 
storage subsystem updates the record with respect to the 
range . 

32. (Original) The system according to claim 31, wherein 
the secondary storage subsystem is arranged to transfer 
the data by destaging the range of the addresses. 

33. (Original) The system according to claim 31, wherein 
the secondary storage subsystem is arranged to maintain a 
mirror of the record, and to select the data to be 
transferred from the second volatile cache memory to the 
second non-volatile storage media responsively to the 
mirror . 

34. (Original) The system according to claim 21, wherein 
the primary storage subsystem is arranged to send a 
message to the secondary storage subsystem indicating 
addresses of the data that have been transferred to the 
first non-volatile storage media, and wherein the 
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secondary storage subsystem is arranged to create a 
record of the addresses of the data copied to the 
secondary storage subsystem, and to update the record in 
response to the message. 

35. (Original) The system according to claim 34, wherein 
the secondary storage subsystem is arranged, upon 
recovery of the system from a failure of the primary 
storage subsystem, to convey, responsively to the record, 
a portion of the data from the secondary storage 
subsystem to be stored on the primary storage subsystem. 

36. (Original) The system according to claim 35, wherein 
the secondary storage subsystem is arranged to remove 
from the record the addresses of the data that have been 
transferred to the first non-volatile storage media. 

37. (Original) The system according to claim 34, wherein 
the secondary storage subsystem is arranged to create the 
record by marking respective bits in a bitmap 
corresponding to addresses of the data copied to the 
secondary storage subsystem, and to update the record by 
clearing the respective bits in response to the message. 

38. (Original) The system according to claim 34, wherein 
the primary storage subsystem is arranged to transfer the 
data over a range of the addresses from the first 
volatile cache memory to the first non-volatile storage 
media, and to indicate in the message that the data in 
the range have been transferred, so that the secondary 
storage subsystem updates the record with respect to the 
range . 

39. (Original) The system according to claim 38, wherein 
the primary storage subsystem is arranged to transfer the 
data by destaging the range of the addresses. 

40. (Original) The system according to claim 38, wherein 
the primary storage subsystem is arranged to maintain a 
mirror of the record, and to select the data to be 
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transferred from the first volatile cache memory to the 
first non-volatile storage media responsively to the 
mirror . 

41. (Currently amended) A computer software product for 
use in a data storage system including primary and 
secondary storage subsystems, which include respective 
first and second control units, respective first and 
second volatile cache memories, and respective first and 
second non-volatile storage media, the product comprising 
a tangible computer-readable medium in which program 
instructions are stored, which instructions, when read by 
the first and second control units, cause the first 
control unit to receive data from a host processor, to 
write the data to the first volatile cache memory, to 
copy the data to the secondary storage subsystem, and to 
transfer the data from the first volatile cache memory to 
the first non-volatile storage media, and cause the 
second control unit to receive and write the copied data 
to the second volatile cache memory, to transfer the data 
from the second volatile cache memory to the second non- 
volatile storage media, and prior to transferring the 
data to the second non-volatile storage media, to return 
an acknowledgment to the primary storage subsystem 
responsively to writing the copied data to the second 
volatile cache memory, wherein the instructions further 
cause the first control unit to signal the host processor 
that the data have been stored in the data storage system 
responsively to the acknowledgment from the secondary 
storage subsystem. 

42. (Original) The product according to claim 41, 
wherein the primary and secondary storage subsystems are 
located at mutually-remote sites, and wherein the 
instructions cause the first and second control units to 
communicate over a communication link between the sites. 
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43. (Original) The product according to claim 41, 
wherein the second volatile cache memory and the second 
non-volatile storage media are located in mutually-remote 
sites, and wherein the instructions cause the second 
control unit to transfer the data from the second 
volatile cache memory to the second non-volatile storage 
media over a communication link between the sites. 

44. (Original) The product according to claim 41, 
wherein the instructions cause the first and second 
control units to mirror the data held by the primary 
storage subsystem on the secondary storage subsystem. 

45. (Original) The product according to claim 44, 
wherein the instructions cause the secondary storage 
subsystem, upon occurrence of a failure in the primary 
storage subsystem, to serve as the primary storage 
subsystem so as to receive further data from the host 
processor to be stored by the data storage system. 

46. (Original) The product according to claim 44, 
wherein the second volatile cache memory is located in a 
site remote from the primary storage subsystem and are 
operated by a service provider other than an owner of the 
primary storage subsystem, and wherein the instructions 
cause the second control unit to transfer the data from 
the second volatile cache memory to the second non- 
volatile storage media on a f ee-per-service basis. 

47. (Original) The product according to claim 41, 
wherein the instructions cause the second control unit to 
send a message to the primary storage subsystem 

indicating addresses of the data that have been 
transferred to the second non-volatile storage media, and 
further cause the first control unit to create a record 
of the addresses of the data copied to the secondary 
storage subsystem, and to update the record in response 
to the message. 
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48. (Original) The product according to claim 47, 
wherein the instructions cause the first control unit, 
upon recovery of the system from a failure of the 
secondary storage subsystem, to convey, responsively to 
the record, a portion of the data from the primary 
storage subsystem to be stored on the secondary storage 
subsystem. 

49. (Original) The product according to claim 48, 
wherein the instructions cause the first control unit to 
remove from the record the addresses of the data that 
have been transferred to the second non-volatile storage 
media . 

50. (Original) The product according to claim 47, 
wherein the instructions cause the first control unit to 
create the record by marking respective bits in a bitmap 
corresponding to addresses of the data copied to the 
secondary storage subsystem, and to update the record by 
clearing the respective bits in response to the message. 

51. (Original) The product according to claim 47, 
wherein the instructions cause the second control unit to 
transfer the data over a range of the addresses from the 
second volatile cache memory to the second non-volatile 
storage media, and to indicate in the message that the 
data in the range have been transferred, so that the 
first control unit updates the record with respect to the 
range . 

52. (Original) The product according to claim 51, 
wherein the instructions cause the second control unit to 
transfer the data by destaging the range of the 
addresses . 

53. (Original) The product according to claim 51, 
wherein the instructions cause the second control unit to 
maintain a mirror of the record, and to select the data 
to be transferred from the second volatile cache memory 
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to the second non-volatile storage media responsively to 
the mirror. 

54. (Original) The product according to claim 41, 
wherein the instructions cause the first control unit to 
send a message to the secondary storage subsystem 
indicating addresses of the data that have been 
transferred to the first non-volatile storage media, and 
further cause the second control unit to create a record 
of the addresses of the data copied to the secondary 
storage subsystem, and to update the record in response 
to the message. 

55. (Original) The product according to claim 54, 
wherein the instructions cause the second control unit, 
upon recovery of the system from a failure of the primary 
storage subsystem, to convey, responsively to the record, 
a portion of the data from the secondary storage 
subsystem to be stored on the primary storage subsystem. 

56. (Original) The product according to claim 55, 
wherein the instructions cause the second control unit to 
remove from the record the addresses of the data that 
have been transferred to the first non-volatile storage 
media . 

57. (Original) The product according to claim 54, 
wherein the instructions cause the second control unit to 
create the record by marking respective bits in a bitmap 
corresponding to addresses of the data copied to the 
secondary storage subsystem, and to update the record by 
clearing the respective bits in response to the message. 

58. (Original) The product according to claim 54, 
wherein the instructions cause the first control unit to 
transfer the data over a range of the addresses from the 
first volatile cache memory to the first non-volatile 
storage media, and to indicate in the message that the 
data in the range have been transferred, so that the 
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secondary storage subsystem updates the record with 
respect to the range. 

59. (Original) The product according to claim 58, 
wherein the instructions cause the first control unit to 
transfer the data by destaging the range of the 
addresses . 

60. (Original) The product according to claim 58, 
wherein the instructions cause the first control unit to 
maintain a mirror of the record, and to select the data 
to be transferred from the first volatile cache memory to 
the first non-volatile storage media responsively to the 
mirror . 
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